CVE-2025-10184_PoC

APK Build for CVE‑2025‑10184 PoC これは CVE‑2025‑10184 の PoC の APK ビルドです この脆弱性は com..providers.telephony に存在し、SMS読み取り権限を持たない任意のアプリがSMSを読み取ることを許可します ソースコード このソースコードと詳細は Rapid7 の記事をご覧ください： https://www.rapid7.com/blog/post/cve-2025-10184-oneplus-oxygenos-telephony-provider-permission-bypass-not-fixed/...

CVE-2025-10184 OnePlus OxygenOS Telephony provider permission bypass

The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent. The user is also not notified that SMS data is being accessed. This could lead to sensitive information...